WO2018021864A1

WO2018021864A1 - Method for providing cloud-based service

Info

Publication number: WO2018021864A1
Application number: PCT/KR2017/008148
Authority: WO
Inventors: 권오승; 최원석
Original assignee: 주식회사 파수닷컴
Priority date: 2016-07-29
Filing date: 2017-07-28
Publication date: 2018-02-01

Abstract

A method for providing a software service of a license management server is disclosed. The method comprises the steps of: receiving a virtual machine interface from a cloud server; installing software of a service provider in the virtual machine interface; transmitting a license to the virtual machine interface; providing ID and password related authority to a user terminal; and providing a service of the software to the user terminal through the virtual machine interface when the user terminal accesses the software. Therefore, source code leakage due to static analysis can be fundamentally prevented.

Description

How to provide cloud-based services

The present invention relates to a cloud-based service providing method, and more particularly, to a cloud-based service providing method for preventing source code leakage.

In order for the application to run on a user terminal, the service provider's product must be installed on the cloud provider's operating system. That is, a service provider can run an application-related business by installing a service provider's product on a cloud provider's operating system. As one way the service runs, you can contract with the cloud provider for infrastructure as a service (IaaS), and with the service provider for products and licenses. In this case, the service provider can install the product in the IaaS that the user has contracted, and the user can use IaaS to conduct business related to the application. This method is cumbersome because the user has to contract with both the cloud provider and the service provider.

As another way of running a service, the service provider contracts with the cloud provider for IaaS, the service provider contracts with the software as a service (SaaS), and the service provider uses the service to We can do related business. In this case, the cloud provider has the right to operate the cloud system. Users who want to do static analysis want security for their source code. However, the service provider had the problem that it could intercept all the sources of the service provider that produced the application.

An object of the present invention for solving the above problems, while providing a SaaS-based service, to provide a service that can prevent the leakage of the user's source code.

Software service providing method of the license management server (server) of the service provider according to an embodiment of the present invention for achieving the above object, a virtual machine interface (virtual machine) from the cloud server of the cloud provider (cloud) provider receiving an interface; Installing software of the service provider on the virtual machine interface; Authorizing a user terminal with respect to an ID and a password; And providing the service of the software to the user terminal through the virtual machine interface when the user terminal accesses the software.

Here, the method of providing a software service of the license management server may further include transmitting a license for authenticating the software use right to the virtual machine interface, in order to authenticate the right related to an ID and a password to the user terminal. Can be.

Here, the authority regarding the ID and password may be granted when the cost for using the software is paid.

Here, when the license is expired, when receiving a request for issuance of a new license from the user terminal, the method may further include granting the right regarding the ID and the password again.

Here, after the license expires, if the user terminal does not receive a request for issuing a new license, the ID and the password for accessing the software may be discarded.

Here, prior to the step of transmitting a license for authentication of the software use right to the virtual machine interface, the first message including the user registration information of the user is received from the cloud server, and the membership request to the issuance request management unit Registering the information; Receiving a second message indicating new instance information identified by user identification information from the cloud server, and updating raw instance information stored in a license issuing management unit with the new instance information; Sending a third message to the cloud server requesting an instance unique identifier;

Receiving the instance unique identifier from the cloud server; Updating the instance unique identifier information with the instance unique identifier received from the cloud server in the issue request management unit; And issue the license through the license issuing management unit.

Here, when the license is transmitted to the virtual machine interface, a fourth message indicating completion of license issuance may be received from the virtual machine interface.

In order to achieve the above object, a license management server of a service provider according to an embodiment of the present invention includes a processor; And a database storing at least one instruction executed by the processor, wherein the at least one instruction is provided with a virtual machine interface from a cloud server of a cloud provider, and the virtual Install the service provider's software on the machine interface, authorize the user terminal with ID and password, and if the user terminal accesses the software, via the virtual machine interface It is executable to provide a service of the software to the user terminal.

Here, the at least one command may be further executable to transmit a license for authenticating the software use right to the virtual machine interface, in order to authenticate the right regarding the ID and password to the user terminal.

Here, the at least one command may be executable to grant the right regarding the ID and the password again when receiving a new license request from the user terminal after the license expires.

Here, the at least one command may be executable to discard the ID and the password for accessing the software if the user terminal does not receive a request for issuing a new license after the license expires.

Here, the at least one command receives and issues a first message including user registration information from the cloud server before transmitting a license for authentication of the software use right to the virtual machine interface. Register the membership registration information with a request management unit, receive a second message indicating new instance information identified by the user identification information from the cloud server, and update the raw instance information stored in the license issuing management unit with the new instance information. And an instance that transmits a third message requesting an instance unique identifier to the cloud server, receives the instance unique identifier from the cloud server, and receives the instance unique identifier information from the cloud server in the issue request management unit. Updated with the unique identifier, and may be further executed to issue the license through the license issuance management.

Here, the at least one command may be further executable to receive a fourth message indicating completion of license issuance from the virtual machine interface when the license is transmitted to the virtual machine interface.

According to the present invention, despite the SaaS-based use, the user has the control of IaaS bar bar has the advantages of both the advantages of SaaS and IaaS.

Specifically, according to the present invention, it has both the advantages of SaaS that can provide a customized service through a setting suitable for each customer, the hardware expansion is easy, and the advantages of IaaS that can prevent the leakage of user source code It works.

1 is a block diagram schematically illustrating a system that supports license issuance.

2 is a block diagram illustrating a node constituting a system that supports license issuance.

3 is a block diagram of IaaS usage.

4 is a block diagram of SaaS usage.

5 is a block diagram of IaaS-SaaS usage.

6 is a block diagram specifically illustrating a system for supporting license issuance.

7 is a flowchart illustrating a process of transmitting information required for issuance of a license to a license management server.

8 is a flowchart illustrating a process of activating an application (or software) by issuing a license.

9 is a flowchart illustrating a process from issuing a license to using a service by a user terminal.

10 is a flowchart illustrating a method of reissuing a license.

Software service providing method of the license management server (server) of the service provider according to an embodiment of the present invention, the step of receiving a virtual machine interface (virtual machine interface) from the cloud server of the cloud provider (cloud) ; Installing software of the service provider on the virtual machine interface; Authorizing a user terminal with respect to an ID and a password; And providing the service of the software to the user terminal through the virtual machine interface when the user terminal accesses the software.

A license management server of a service provider according to an embodiment of the present invention may include a processor; And a database storing at least one instruction executed by the processor, wherein the at least one instruction is provided with a virtual machine interface from a cloud server of a cloud provider, and the virtual Install the service provider's software on the machine interface, authorize the user terminal with ID and password, and if the user terminal accesses the software, via the virtual machine interface It is executable to provide a service of the software to the user terminal.

As the present invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

Terms such as first and second may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component. The term and / or includes a combination of a plurality of related items or any item of a plurality of related items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter, with reference to the accompanying drawings, it will be described in detail a preferred embodiment of the present invention. In the following description of the present invention, the same reference numerals are used for the same elements in the drawings and redundant descriptions of the same elements will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram schematically illustrating a system for supporting license issuance according to an embodiment of the present invention.

Referring to FIG. 1, a system that supports license issuance includes a cloud server 100, a user terminal 140, a license management server 110, an administrator terminal 150, a member mail server 120, and a virtual machine interface 130. ) May be included. The virtual machine interface 130 may be an IaaS or a VM instance.

The cloud server 100 may be connected to the user terminal 140, the license management server 110, and the member mail server 120 through a wired network or a wireless network. For example, the cloud server 100 may be a user terminal 140, a license management server 110, and a member mail server by long term evolution (LTE), long term evolution-advanced (LTE-A), or the like defined in the 3GPP standard. May be connected to 120.

Alternatively, the cloud server 100 may be connected to the user terminal 140, the license management server 110, and the member mail server 120 by a wireless LAN (WLAN), a wireless personal area network (WPAN), or the like defined by the IEEE standard. have.

The cloud server 100 may be connected to the user terminal 140, the license management server 110, and the member mail server 120 by a wired LAN. The license management server 110 may be connected to the cloud server 100 and the manager terminal 150 through a wired network or a wireless network.

The cloud server 100 may receive information necessary for issuance of a license from the user terminal 140, the license management server 110, and the member mail server 120, and execute an application based on the received information. can do. The application here may be software. The user terminal 140 and the license management server 110 may transmit information required for license issuance to the cloud server 100.

The user terminal 140 may communicate with a desktop computer, a laptop computer, a tablet PC, a wireless phone, a mobile phone, a smart phone, and a smart phone. Smart watch, smart glass, e-book reader, portable multimedia player, portable game console, navigation device, digital camera, digital multimedia broadcasting (DMB) player, digital Digital audio recorder, digital audio player, digital picture recorder, digital picture player, digital video recorder, digital video recorder player).

The virtual machine interface 130 may be software running on the cloud server 100.

2 is a block diagram illustrating a node constituting a system for supporting license issuance according to an embodiment of the present invention.

Referring to FIG. 2, the node 200 may include at least one processor 210, a memory 220, and a network interface device 230 connected to a network to perform communication. In addition, the node 200 may further include an input interface device 240, an output interface device 250, a storage device 260, and the like.

Here, the node 200 may be the user terminal 140, the cloud server 100, the license management server 110, the administrator terminal 150, the member mail server 120, and the like described with reference to FIG. 1. Each component included in the node 200 may be connected by a bus 270 to communicate with each other.

The processor 210 may execute a program command stored in the memory 220 and / or the storage device 260. The processor 210 may refer to a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor on which methods according to the present invention are performed.

The memory 220 and the storage device 260 may be configured of a volatile storage medium and / or a nonvolatile storage medium. For example, the memory 220 may be configured as read only memory (ROM) and / or random access memory (RAM).

In addition, even when a method (for example, transmission or reception of a message) is performed among the nodes, a corresponding second node corresponds to a method (for example, a method performed in the first node). , Receiving or sending a message).

That is, when the operation of the cloud server 100 is described, the license management server 110 corresponding thereto may perform an operation corresponding to the operation of the cloud server 100. On the contrary, when the operation of the license management server 110 is described, the cloud server 100 corresponding thereto may perform an operation corresponding to the operation of the license management server 110.

3 is a block diagram of IaaS usage.

Referring to FIG. 3, a general IaaS usage relationship is described. IaaS can mean making servers, storage, and networks into virtualized environments that provide infrastructure services as needed. IaaS may be a virtual machine interface 130.

The user terminal 140 may purchase an IaaS service from the cloud provider 105. That is, the user terminal 140 may make a contract regarding IaaS with the cloud provider 105, and obtain control and usage rights related to IaaS from the cloud provider 105.

The user terminal 140 may receive a product and a license of the service provider 310 from the service provider 115. The product of service provider 310 may be an application. Specifically, the product of the service provider 310 may be an application that statically analyzes the developer's source code. The user terminal 140 may be authorized to use the product for the service provider 115 through a license provided from the service provider 115.

The service provider 115 may be a company that operates the license management server 110 described in FIG. 6. In addition, the cloud provider 105 may be a company operating the cloud server described in FIG. The service provider 115 may install the product of the service provider 115 in the IaaS purchased by the user terminal 140.

If the license period of the user terminal 140 has expired, the cloud provider 105 may check the intention to extend the license of the user terminal 140. When the cloud provider 105 confirms the license extension intention of the user terminal 140, the cloud provider 105 may reissue or extend the license through the service provider 115.

If the cloud provider 105 confirms the intention not to extend the license of the user terminal 140, the cloud provider 105 may revoke the license through the service provider 115.

4 is a block diagram of SaaS usage.

Referring to FIG. 4, a general SaaS usage relationship is described. SaaS can mean cloud-based software. The service provider 115 may purchase IaaS from the cloud provider 105. That is, the service provider 115 may contract with the cloud provider 105 regarding IaaS, and may acquire control and use rights regarding IaaS from the cloud provider 105.

The user terminal 140 may contract with the service provider 310 regarding SaaS. The user terminal 140 may use a product of the service provider 115 through IaaS of the service provider 115 without installing software or an application separately. That is, the user terminal 140 may obtain a right to use IaaS from the service provider 115.

If the contract period of the user terminal 140 has expired, the service provider 115 may confirm the intention to extend the contract of the user terminal 140. If the service provider 115 confirms the intention to extend the contract of the user terminal 140, the service provider 115 may extend the contract period.

When the cloud provider 105 confirms that it does not want to extend the contract of the user terminal 140, the cloud provider 105 may revoke the use authority of the user terminal 140.

5 is a block diagram of IaaS-SaaS usage.

Referring to Figure 5, the IaaS-SaaS intermediate form is described. The service provider 115 may purchase IaaS from the cloud provider 105. That is, the service provider 115 may make a contract with the cloud provider 105 regarding IaaS. In this case, the user terminal 140 may allow the cloud provider 105 to obtain a control right for IaaS.

In this case, the user terminal 140 may acquire both control authority and usage authority related to IaaS. On the other hand, the service provider 115 may not have both control and use rights for IaaS. Therefore, the service provider 115 cannot intercept the user's source code because all control over the IaaS is passed to the user.

The service provider 115 may install a product and a license of the service provider 115 in the purchased IaaS. The product of the service provider 115 may be a static analysis tool that accurately detects security weaknesses and defects that occur when executing a program that is difficult to find only by source code parsing based on an execution semantic analysis engine.

The service provider 115 may pre-install the product of the service provider 115 in IaaS. The service provider 115 may also transmit a license for executing the product of the service provider 115 to IaaS in advance.

If the license period of the user terminal 140 has expired, the service provider 115 may check the intention to extend the license of the user terminal 140. If the license of the product of the service provider 115 expires, the user may request a license again.

If the service provider 115 confirms the license extension intention of the user terminal 140, the service provider 115 may reissue or extend the license. If the service provider 115 confirms that the user terminal 140 intends not to extend the license, the service provider 115 may revoke the license.

The service provider 115 may prepare a virtual machine interface on which the product of the service provider 115 is mounted. The service provider 115 may prepare a product in cooperation with the cloud provider 300. The user terminal 140 may generate (or activate) a virtual machine interface.

The user terminal 140 may receive a license from the service provider 115. The virtual machine interface control right of the user terminal 140, the service provider 115 does not have access to the ID or password to access the virtual machine interface. The user terminal 140 may have an ID or password for accessing the virtual machine interface. The user terminal 140 may use a virtual machine interface.

The user terminal 140 may request the service provider 115 to provide a virtual machine interface based service (eg, SaaS). When a request for providing a service based on a virtual machine interface is requested, a charging method may be negotiated between the service provider 115 and the user terminal 140. The charging method may be determined based on the service usage period, the number of use, the frequency of use, and the like.

The service provider 115 may obtain IaaS from the cloud provider 105. The service provider 115 may receive a signal from the cloud provider 105 requesting a license issuance to install a product of the service provider 115.

Licenses may be issued in the same or similar manner as described in FIGS. 7, 8 and 10. The service provider 115 may install the license to install the product of the service provider 115 in the IaaS when a license is issued. The service provider 115 may pre-install products and licenses in IaaS. IaaS with installed products and licenses may be referred to as SaaS. SaaS may be generated in the same or similar manner as the license issuance procedure to be described with reference to FIGS. 7, 8 and 10. SaaS can be software or applications that are certified based on a licensed cloud.

The service provider 115 may provide SaaS to the user terminal 140. When the SaaS is provided to the user terminal 140, all rights (use / disposal, etc.) may be passed to the user terminal 140. In this case, since all control rights for the IaaS are passed to the user terminal 140, the service provider 115 may not intercept the source code of the user terminal 140.

The user terminal 140 may use SaaS. When the license period expires, the user terminal 140 cannot use the SaaS service. When the license period expires, the user terminal 140 may discard IaaS or SaaS.

The service provider 115 may prepare a service virtual machine interface on which the product of the service provider 115 is mounted. The service provider 115 may work with the cloud provider 105 to prepare the product.

The user terminal 140 may generate instance information to be used for generating a virtual machine interface. The user terminal 140 may receive a license from the service provider 115. The virtual machine interface control right is not accessible to the service provider to the user terminal 140. The user terminal 140 may have an ID or a password.

Referring to FIG. 6, the system for issuing a license may include a user terminal 140, a cloud server 100, an administrator terminal 150, a member mail server 120, and a virtual machine interface 130.

The cloud server 100 may include a processor 3 (102). The license management server 110 may include a reception server 112, a processor 1 114, a subscription request manager 116, and a license issue manager 118. The virtual machine interface 130 may include a processor 2 132 and an application 134.

The license management server 110 may include a reception server 112, a processor 1 114, a subscription request manager 116, and a license issue manager 118. The receiving server 112 and the processing unit 1 114 may be connected to the cloud server 100 through a wired / wireless communication method. Processing unit 1 (114) of the license management server 110 may be a processor for automatically performing a license issuing procedure. The processor 1 114 may be a processor of the receiving server 112. The processor 1 114 may be connected to the subscription request manager 116 and the license issue manager 118 by wire.

The processor 1 114 may be connected to the processor 2 132 of the virtual machine interface 130 by a wired / wireless communication method. The processor 1 114 may be connected to the processor 2 132 of the virtual machine interface 130 by a wired / wireless communication method. The processor 1 114 may be connected to the virtual manager terminal 150 through a wired / wireless communication method. The processor 1 114 may be connected to the member mail server 120 through a wired / wireless communication method. The license issuing management unit 118 may be connected to the processing unit 2 132 of the virtual machine interface 130 by a wired / wireless communication method.

The virtual machine interface 130 may mean IaaS. IaaS can mean making servers, storage, and networks into virtualized environments that provide infrastructure services as needed. IaaS may be a virtual machine interface 130.

In addition, the virtual machine interface 130 may be a concept that collectively refers to the virtual processor 2 132 and the application 134 in software.

The processor 2 132 may be connected to the processor 3 102 of the cloud server 100 through a wired / wireless communication method. The processor 2 132 may execute the application 134. The processor 2 132 may be connected to the license issuing manager 118 and the processor 1 114 through a wired / wireless communication method.

The user terminal 140 may access the application 134 through the virtual machine interface 130. The processor 2 132 of the virtual machine interface 130 may be a processor for automatically performing a license authentication procedure.

The cloud server 100 may include a processor 3 102 that supports license issuance. The processor 3 102 may be connected to the user terminal 140 through a wired / wireless communication method. The processor 3 102 may activate the virtual machine interface 130.

The processor 3 102 may be connected to the member mail server 120. The processor 3 (102) may transmit the mail related to the license authentication to the member mail server 120 in the license authentication procedure. The processor 3 102 may be connected to the user terminal 140 and the cloud server 100 through an interface.

The processor 3 102 of the cloud server 100 may exchange signals with the processor 2 132 of the virtual machine interface 130. The processor 3 102 may be a processor that performs a procedure for issuing a license in the cloud server 100.

The processor 1 114 may receive new instance information identified by the user identification information from the cloud server 100 or the first message including the user registration information from the cloud server 100 to which the reception server 112 is connected to the terminal. It may monitor whether it receives a second message indicating.

When the receiving server 112 obtains the first message or the second message, the processor 1 114 may obtain the first message or the second message from the receiving server 112. When the processor 1 114 acquires the first message or the second message from the receiving server 112, the processor 1 114 may store the first message or the second message in a database included in the license management server 110.

In addition, when the license issuance is completed, the processor 1 114 may store the issued license in a database included in the license management server 110. In detail, the processor 1 114 may store the first message, the second message, and the fourth message in the database of the license management server 110. When storing a license, the processor 1 114 may store the license issue time and user identification information in a database included in the license management server 110. The database may later generate big data regarding connection of the application 134 of the user terminal 140 based on the stored information.

The database may support an application program interface (API). The cloud server 100, the license management server 110, and the virtual machine interface 130 may each include a database capable of storing information. The processor 2 132 may store a fifth message including license issuance completion information in a database of the virtual machine interface 130.

Processing unit 3 (102) may require a user registration or login, such as a user in order to obtain user identification information. The user may access the cloud server 100 to register or log in. When a user or the like subscribes to the cloud server 100 as a member, the user or the like may input user identification information to the cloud server 100, and in this case, the processing unit 3 102 may easily perform the user's login. Identification information of the user can be obtained.

Even if the user is not registered as a member, user identification information can be entered to perform a license issuance procedure. The identification information may be an ID and a password in the case of a registered member. In addition, the identification information may include a user name, address, nationality, device used, authentication number, etc. for non-members.

If the user accesses the application 134 after the license period has expired, the application 134 may output a message to the user interface that the license period has expired to the user terminal. When the application 134 receives a license reissue request signal from the user terminal 140, the processor 2 132 may transmit a signal for requesting a license reissue to the processor 1 114.

The processor 1 114 receiving the signal requesting the license reissuance may transmit a signal requesting the license reissuance to the manager terminal 150. The manager terminal 150 receiving the signal requesting the license reissuance may transmit a license reissuance signal to the processor 1 114. The processor 1 114 receiving the license reissuance signal may issue a license corresponding to the user information. The processor 1 114 may transmit the issued license to the processor 2 132. The processor 2 132 may copy a license file received from the processor 1 114. In addition, the processor 2 132 may store the license file received from the processor 1 114 in the application 134. The virtual machine interface 130 may transmit a fifth message including the license issuance completion information to the processor 1 114.

When the license period has expired, the processor 1 114 may transmit a signal that the license period has expired to the manager terminal 150. The manager terminal 150 receiving a signal that the license period has expired may transmit a license revocation signal to the processor 1 114. The processor 1 114 receiving the license revocation signal may transmit a license revocation signal to the license processor 2 132. The processor 2 132 receiving the license revocation signal may revoke the license stored in the virtual machine interface 130.

Referring to FIG. 7, FIG. 7 may be a process in which the license management server 100 monitors subscription information and instance information transmitted from the user terminal 140 to the cloud server 100 in a method of issuing a license. .

In detail, the user terminal 140 may access the cloud server 100. The user terminal 140 may transmit the member registration information including the identification information of the user to the cloud server 100 (S700). The cloud server 100 may receive membership registration information including identification information of the user from the user terminal 140.

The identification information may be an ID and a password in the case of a registered member. In addition, the identification information may include a user name, address, nationality, device used, authentication number, bank name, bank account number, etc. for non-members. The cloud server 100 may transmit a first message including user registration information to the reception server 112 of the license management server 110 (S702).

The reception server 112 may receive a first message including user registration information of the user from the cloud server 100. The processor 1 114 of the license management server 110 may monitor whether the first server receives the first message (S704).

When the receiving server 112 receives the first message, the processing unit 1 114 may register the membership registration information in the issuing request management unit (S706). The user terminal 140 may access the cloud server 100 and transmit information necessary for generating an instance identified by the user identification information to the cloud server 100 (S708).

The cloud server 100 may receive information necessary for generating an instance identified by the user identification information from the user terminal 140. When the cloud server 100 receives the information necessary for generating the instance identified by the user identification information from the user terminal 140, the cloud server 100 may generate the instance information based on the received information necessary for generating the instance (S710). The instance information may be identification information of the virtual machine interface 130.

The processor 3 of the cloud server 100 may check payment information of the user. When the payment information is valid and the predetermined payment amount is directly deposited into the user terminal 140, the processor 3 may generate an instance corresponding to the deposited amount. The cloud server 100 may check the payment information of the user and may not create an instance if the payment information is not valid.

If the information identified by the user identification information is a registered identifier, the cloud server 100 may activate the virtual machine interface 130 for the user identified by the user identification information (S712).

The cloud server 100 may transmit a second message including the new instance information to the reception server 112 (S714). The reception server 112 may receive a second message including new instance information from the cloud server 100.

The second message may include a signal for requesting issuance of a license. The processor 1 114 of the license management server 110 may monitor whether the receiving server 112 receives the second message (S716).

Referring to FIG. 8, FIG. 8 may be a process of activating the virtual machine interface 130 based on membership registration information and instance information monitored by the license management server 110 in a method of issuing a license.

In detail, the license issuance management unit may store the instance information. The processor 1 114 of the license management server 110 may monitor whether the receiving server 112 receives the second message (S716). When the receiving server 112 receives the second message, the processor 1 114 may store new instance information included in the second message received by the receiving server 112 in the license issuing management unit (S718). The stored instance information can be used as big data.

The processor 1 114 of the license management server 110 may transmit a third message requesting an instance unique identifier to the cloud server 100 (S720). The cloud server 100 may receive a third message requesting an instance unique identifier from the processor 1 114.

The cloud server 100 may transmit an instance unique identifier to the processing unit 1 114 of the license management server 110 in response to the third message (S722). The processor 1 114 may receive an instance unique identifier that is a response to the third message from the cloud server 100.

When the processor 1 114 receives the instance unique identifier corresponding to the third message from the cloud server 100, the processor 1 114 may store the instance unique identifier received from the cloud server 100 in the issuance request management unit (S724). Stored instance unique identifier information may be used as big data.

When the processing unit 1 114 receives the instance unique identifier from the cloud server 100, the new instance information of the license issuing management unit is performed.

License can be issued through the license issuance management unit (S726). When the processor 1 114 issues a license, the processor 1 114 may transmit a fourth message including the license issued to the virtual machine interface 130 (S728).

The virtual machine interface 130 may receive a fourth message including a license issued from the processor 1 114. The virtual machine interface 130 receiving the fourth message may activate the application. In addition, the virtual machine interface 130 receiving the fourth message may activate the processor 2 of the virtual machine interface 130 (S730).

The processor 2 of the virtual machine interface 130 may copy the license file received from the processor 1 114. In addition, the processor 2 may store the license file received from the processor 1 114 in the application (S732). The virtual machine interface 130 may transmit a fifth message including the license issuance completion information to the processor 1 114 (S734).

When the processor 2 transmits the fifth message including the license issuance completion information to the processor 1 114, the processor 2 may be terminated (S736).

When the processor 1 114 receives the fifth message, the processor 1 114 may store information on whether the license is issued to the license issuance management unit. Information on whether the license is issued by the license issuance management unit may be expressed as a license issuance or a license is not issued (S738).

Referring to FIG. 9, FIG. 9 may be a process in which a user terminal 140 receives a desired service by accessing a virtual machine interface 130 in a method of issuing a license. In detail, the user terminal 140 may access and log in to the virtual machine interface 130 (S740).

When the user terminal 140 is connected to the virtual machine interface 130, the virtual machine interface 130 may transmit a sixth message requesting an instance unique identifier to the cloud server 100 (S742). The cloud server 100 may receive a sixth message requesting an instance unique identifier from the virtual machine interface 130.

The cloud server 100 may transmit an instance unique identifier to the virtual machine interface 130 in response to the sixth message (S744). The virtual machine interface 130 may receive an instance unique identifier corresponding to the sixth message from the cloud server 100.

The application operating in the virtual machine interface 130 may determine whether the same by comparing the instance unique identifier (unique identifier of the virtual machine interface) and the unique identifier of the virtual machine interface 130 included in the license (S746). The application may be operated when the instance unique identifier and the unique identifier of the virtual machine interface 130 included in the license are the same (S748). An application may not work if the instance unique identifier and the license unique identifier are not the same.

The processor 1 114 may perform a procedure for issuing a license only when receiving a license request from the virtual machine interface 130. In this case, since the risk of the back door is small, step S738 (step in which the processing unit 2 ends) may not be performed.

Backdoors are intentionally created by system designers to provide service technicians or maintenance programmers with access to other PCs. Backdoors are recently used to refer to terms that are vulnerable to hacking.

The first message, the second message, and the fifth message are stored in a database included in the license management server 110, and the database may support an API.

10 is a flowchart illustrating a method of reissuing a license.

Referring to FIG. 10, when a user accesses an application after the license period has expired, the application may output a screen indicating that the license period has expired. When the application receives a license reissue request signal from the user, the license management server 110 may transmit a signal including a seventh message requesting the license reissue to the processor 1 114 (S750).

The processor 1 114 receiving the signal requesting the license reissuance may transmit a signal including the seventh message requesting the license reissuance to the manager terminal 150 (S752). Upon receiving the signal requesting the license reissuance, the manager terminal 150 may transmit a signal including an eighth message, which is a license reissuance signal, to the processor 1 114 (S754).

The processor 1 114 receiving the license reissuance signal may issue a license corresponding to the user information through the license issuance management unit (S756). The processor 1 114 may transmit an eighth message including the issued license to the virtual machine interface 130 (S758). The virtual machine interface 130 may activate the application and the processor 2 (S760).

The processor 2 may copy the license file received from the processor 1 114. In addition, the processor 2 may store the license file received from the processor 1 114 in the application (S762). The processor 2 may transmit a signal including a ninth message, which is license issuance completion information, to the processor 1 114 (S764). When the processor 2 transmits the ninth message including the license issuance completion information to the processor 1 114, the processor 2 may be terminated (S766).

When the license period has expired, the processor 1 114 may transmit a signal to the administrator terminal 150 that the license period has expired (a signal that the user does not want to be reissued). The manager terminal 150 receiving a signal that the license period has expired may transmit a license revocation signal to the processor 1 114.

The processor 1 114 receiving the license revocation signal may transmit a license revocation signal to the license management server 110. The license management server 110 receiving the license revocation signal may revoke the license stored in the virtual machine interface 130.

The methods according to the invention can be implemented in the form of program instructions that can be executed by various computer means and recorded on a computer readable medium. Computer-readable media may include, alone or in combination with the program instructions, data files, data structures, and the like. The program instructions recorded on the computer readable medium may be those specially designed and constructed for the present invention, or may be known and available to those skilled in computer software.

Examples of computer readable media include hardware devices that are specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code, such as produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate with at least one software module to perform the operations of the present invention, and vice versa.

Although described with reference to the embodiments above, those skilled in the art will understand that the present invention can be variously modified and changed without departing from the spirit and scope of the invention as set forth in the claims below. Could be.

Claims

A method of providing a software service of a license management server of a service provider,

Receiving a virtual machine interface from a cloud server of a cloud provider;

Installing software of the service provider on the virtual machine interface;

Authorizing a user terminal with respect to an ID and a password; And

And providing the service of the software to the user terminal through the virtual machine interface when the user terminal accesses the software.
The method according to claim 1,

How to provide software services for the license management server,

In order to authenticate the authority regarding the ID and password to the user terminal,

And transmitting a license for authentication of the software usage right to the virtual machine interface.
The method according to claim 1,

The authority for the ID and password is granted when the cost for using the software is paid.
The method according to claim 1,

After the license expires, if a request for issuance of a new license from the user terminal,

And re-granting rights relating to the ID and the password.
The method according to claim 1,

After the license expires, if the user terminal has not received a request for issuing a new license,

Discarding the ID and the password for accessing the software.
The method according to claim 1,

Prior to transmitting a license for authentication of the software use right to the virtual machine interface,

Receiving a first message including user registration information of the user from the cloud server, and registering the membership registration information with an issue request management unit;

Receiving a second message indicating new instance information identified by user identification information from the cloud server, and updating raw instance information stored in a license issuing management unit with the new instance information;

Sending a third message to the cloud server requesting an instance unique identifier;

Receiving the instance unique identifier from the cloud server;

Updating the instance unique identifier information with the instance unique identifier received from the cloud server in the issue request management unit; And

Issuing the license through the license issuing management unit.
The method according to claim 6,

If the license is sent to the virtual machine interface,

And receiving a fourth message indicating completion of license issuance from the virtual machine interface.
As a license management server,

A processor; And

A database storing at least one instruction executed by the processor,

The at least one command is

Receive a virtual machine interface from a cloud provider's cloud server,

Install the service provider's software on the virtual machine interface,

Authorize user terminal with respect to id and password, and

And when the user terminal accesses the software, executable to provide a service of the software to the user terminal through the virtual machine interface.
The method according to claim 8,

The at least one command is

In order to authenticate the authority regarding the ID and password to the user terminal,

And further executable to transmit a license for authentication of the software use right to the virtual machine interface.
The method according to claim 8,

The right relating to the ID and password is granted when a fee for using the software is paid.
The method according to claim 8,

The at least one command is

After the license expires, if a request for issuance of a new license from the user terminal,

And executable to re-authorize the ID and the password.
The method according to claim 8,

The at least one command is

After the license expires, if the user terminal has not received a request for issuing a new license,

And operable to revoke the ID and the password for accessing the software.
The method according to claim 8,

The at least one command is

Prior to transferring a license for authentication of the software use right to the virtual machine interface,

Receiving a first message including user registration information of the user from the cloud server, registering the membership registration information with an issue request management unit,

Receiving a second message indicating new instance information identified by user identification information from the cloud server, updating raw instance information stored in a license issuing management unit with the new instance information,

Send a third message to the cloud server requesting an instance unique identifier,

Receive the instance unique identifier from the cloud server,

Update the instance unique identifier information to the instance unique identifier received from the cloud server in the issuing request management unit, and

And further executable to issue the license through the license issuing management unit.
The method according to claim 13,

The at least one command is

If the license is sent to the virtual machine interface,

And further executable to receive a fourth message from the virtual machine interface indicating completion of license issuance.